Every user interaction, policy evaluation, context retrieval, guardrail trigger, and model routing decision is logged immutably to prove zero-cloud data leakage during enterprise client audits.